Kintone
v1.0.2Kintone integration. Manage Apps, Users, Organizations, Groups, Views, Reports. Use when the user wants to interact with Kintone data.
⭐ 0· 92·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Kintone integration) matches the instructions: all runtime steps are about discovering/creating a Membrane connection and running Kintone actions or proxied API requests. No unrelated services, credentials, or system access are requested.
Instruction Scope
SKILL.md confines actions to installing/using the Membrane CLI, creating connections, listing actions, running actions, and optionally proxying to Kintone via Membrane. It does not instruct reading arbitrary local files, harvesting environment variables, or sending data to endpoints outside Membrane/Kintone.
Install Mechanism
There is no automated install spec in the registry; the doc tells users to run 'npm install -g @membranehq/cli'. Installing a public npm CLI is a typical user action for this integration but is a moderate-risk operation (external code). Users should verify the npm package and repo before installing.
Credentials
The skill declares no required env vars or credentials. It relies on Membrane-managed auth (browser-based login and server-side credential handling), which is proportionate to the stated purpose. No unrelated secrets are requested.
Persistence & Privilege
The skill is instruction-only, has no install-time persistence or 'always' flag, and does not request modification of other skills or global agent settings.
Assessment
This skill appears to do what it says: use Membrane to connect to Kintone. Before installing or following its instructions: 1) verify the @membranehq/cli npm package and its GitHub repository (publisher, stars, recent activity) to ensure authenticity; 2) install the CLI in a controlled environment (or use a container/VM) if you have supply-chain concerns about global npm installs; 3) confirm you're comfortable letting Membrane manage the Kintone credentials (the skill uses browser-based auth and a Membrane proxy); and 4) be aware that the Membrane proxy can send arbitrary requests to Kintone on your behalf, so only connect accounts you trust and audit connection permissions.Like a lobster shell, security has layers — review code before you run it.
latestvk977pxjdwpajax20d992n7zv1h8435k4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.